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WHAT I S CLAIMED IS: 

1 .\ A mobile computer management device located in^a home 
netwtork of a mobile computer for enabling the mobile 
5 computer to carry out communications while moving over 
inter-connected networks, the mobile computer management 
device comprising: 

a registration unit for registering an information on 
a current location of the mobile computer, based on a 
10 registration\nessage transmitted from the mobile computer, 
which is currently located outside the home network; 

a transf erVunit for transferring packets destined to 
the mobile computer to the current location of the mobile 



computer according to the information registered by the 



H= 15 registration unit; \and 



m a user authentication unit for carrying out a user 

y3 authentication, prion to a registration of the information 

on the current location of the mobile computer, to judge a 



properness of a user ofythe mob-lie computer according to a 
20 user-input-based information received from the mobile 
computer, and controllingythe Ve^istration of the 
information by the registration unit according to a result 
of the user authentication. 

25 2. The mobile computer management device of claim 1, 
further comprising : 

a host authentication unit \f or carrying out a host 
authentication, prior to the registration of the 
information on the current location of the mobile computer, 

30 to judge a properness of the mobile computer according to 
the registration message received friom the mobile computer, 
and permitting the registration of the information by the 
registration unit when both the host Authentication and the 
user authentication succeed. 

35 
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3. The mobile computer management device of claim 1, 
further comprising: 

transmission unit for transmitting, prior to the 
registration of the information, a challenge message that 
5 requests\returning of a user authentication information to 
the mobileV computer when a new registration message 
containing \he information on the current location of the 
mobile computer is received from the mobile computer; 
wherein vfoe user authentication unit judges the 
10 properness of t\he user according to the user input based 
information which is contained in a response message 
returned from the\mobile computer in response to the 
challenge message as the user authentication information. 

15 4. The mobile compWer management device of claim 3, 

wherein the transmiss\on unit also transmits the challenge 



message that requests ^eturningOftf the user authentication 
information to the mobile comppt(j|r when another 
registration message f or^e-regd^W^^or^ of an already 
20 registered current location is received from the mobile 

computer and a prescribed condition indicates that the user 
authentication is required to be executed again, prior to 
the re-registration by the registration unit. 

25 5. The mobile computer management device of claim 4, 
wherein said another message fon re-registration is 
received at a prescribed interval, and the challenge 
message is transmitted at an interval longer than the 
prescribed interval . 

30 

6. The mobile computer management device of claim 3, 
wherein the transmission unit transmits the challenge 
message that contains a challenge code\ and the user 
authentication unit judges the properness of the user by 
35 checking a one-time password based on tn& challenge code 
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which is returned from the mobile computer as the user- 
input-ba^ed information . 

7. The mobile computer management device of claim 1, 
wherein the us^er authentication unit refuses subsequent 
registration requests from the mobile computer when the 
user authentication according to the user-input-based 
information receive^ from tjhe mobile computer fails for a 
prescribed number of \imes aons^e-H-lrively . 

8. The mobile computer^ management device of claim 1, 
wherein the user authentication unit judges the properness 
of the user according to wfkether a password returned from 



t% the mobile computer as the user-input-based information 



M> 15 coincides with a pre-registered one 



9. A mobile computer device capable of carrying out 



fit communications while moving over inter-connected networks, 

l_ the mobile computer device comprising: 

a 

20 a registration message transmission unit for 

transmitting a registration message containing an 
information on a current location of the mobile computer 
device, from outside a home network of the mobile computer 
device to a mobile computer management device located at 
25 the home network, the mobile computer management device 
having a function for managing the information on the 
current location of the mobile computer device and 
transferring packets destined to the mobile computer device 
to the current location of the mobile computer device; 
30 a user input unit for accepting a user input for user 

authentication; and 

a user-input-based information transmission unit for 
transmitting to the mobile computer management device a 
response message containing information based on the user 
35 input as a user authentication information, when a 
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challenge message that requests returning of the user 
authentication information is received from the mobile 
computer management device in response to the registration 
message . 

5 

10. The mobile computer device of claim 9, further 
comprising: 

an authentication unit for judging a properness of the 
mobile computer management device according to the 
10 challenge message received from the mobile computer 
management device ; 

wherein the user- input-based information transmission 
.\±, unit transmits the response message containing the 

jj information based on the user input when the mobile 

^ 15 computer management device is judged as proper . 

*Q 11. The mobile computer device of claim 9, wherein the 

m 

?jj user input based information transmission unit transmits 

^ the response message containing a one-time password based 

2 20 on a challenge code contained in the challenge message 

3 received from the mobile computer management device as the 

; h user input based information . 

nr? 

12. The mobile computer device of claim 9, further 

25 comprising: 

a message transmission stopping unit for stopping 
subsequent transmissions of the registration message from 
the mobile computer device when a message indicating a 
failure of the user authentication is received from the 

30 mobile computer management device for a prescribed number 
of times consecutively . 



13. The mobile computer device of claim 9, wherein the 
user input based information transmission unit transmits a 
35 password entered by a user at the mobile computer device as 
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the user input based information. 

14. A mobile computer device capable of carrying out 
communications while moving over inter-connected networks, 

5 the mobile computer device comprising: 

an external interface unit for reading out desired 
information from an external memory device connected to the 
mobile computer device , wherein the external memory device 
stores at least a user information and a network 
10 information to be used for communications at a visited 
site ; 

a user authentication unit for carrying out first user 
authentication locally at the mobile computer device 
according to the user information stored in the external 

15 memory device and a user input; 

a registration message transmission unit for 
transmitting a registration message containing an 
information on a current location of the mobile computer 
device, from outside a home network of the mobile computer 

20 device to a mobile computer management device located at 

the home network , by using the network information read out 
from the external memory device under a control by the user 
authentication unit, the mobile computer management device 
having a function for managing the information on the 

25 current location of the mobile computer device and 

transferring packets destined to the mobile computer device 
to the current location of the mobile computer device ; and 

a user-input-based information transmission unit for 
transmitting to the mobile computer management device a 

30 user- input -based information to be used for second user 
authentication at the mobile computer management device. 

15 . The mobile computer device of claim 14 , wherein the 
user authentication unit permits reading from the external 

35 memory device through the external interface unit when the 
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first user authentication succeeds. 

16. The mobile computer device of claim 14, wherein the 
user authentication unit permits transmission of the 

5 registration message by the registration message 

transmission unit when the first user authentication 
succeeds. 

17. The mobile computer device of claim 14, wherein the 
10 user information stored in the external memory device 

contains a personal information of a user who uses the 
mobile computer device, and the user authentication unit 
judges that the first user authentication succeeds when a 
y user authentication information stored in the mobile 

M 3 15 computer device in correspondence to the personal 

3l information stored in the external memory device coincides 

j|| with the user input as entered by the user at a time of 

~l connecting the external memory device to the mobile 



computer device, 



20 



Q 18. The mobile computer device of claim 14, further 

T comprising: 

03 a reading prohibiting unit for prohibiting subsequent 

reading from the external memory device through the 
25 external interface unit when the first user authentication 
fails for a prescribed number of times consecutively. 

19. The mobile computer device of claim 14, further 
comprising: 

30 a message transmission stopping unit for stopping 

subsequent transmissions of the registration message from 
the mobile computer device when the first user 
authentication fails for a prescribed number of times 
consecutively. 

35 
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20 . The mobile computer device of claim 14 , further 
comprising: 

a reading prohibiting unit for prohibiting subsequent 
reading from the external memory device through the 
external interface unit when the second user authentication 
at the mobile computer management device fails for a 
prescribed number of times consecutively . 

21 . The mobile computer device of claim 14 , further 



a message transmission stopping unit for stopping 
subsequent transmissions of the registration message from 
the mobile computer device when the second user 
authentication at the mobile computer management device 
15 fails for a prescribed number of times consecutively. 

22 . The mobile computer device of claim 14 , wherein the 
network information to be read out from the external memory 
device contains at least one of a home address information 

20 of the mobile computer device, an address information of 
the mobile computer management device , and an information 
for host authentication to be carried out between the 
mobile computer device and the mobile computer management 
device . 

25 

23. The mobile computer device of claim 14, wherein the 
external memory device also stores a security information 
with respect to a packet relay device which is capable of 
processing encrypted packets transmitted from the mobile 

30 computer device, and the mobile computer device carries out 
cipher communications using an encryption processing from 
the visited site, by using the security information read 
out from the external memory device through the external 
interface unit. 

35 
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24. The mobile computer device of claim 14, further 
comprising: 

an internal memory for temporarily storing the desired 
information read out from the external memory device, 
5 wherein the desired information temporarily stored in the 
internal memory is deleted when communications using the 
desired information is finished. 

25y. A method for registering a mobile computer in a mobile 
10 computer management device for enabling the mobile computer 
to caWy out communications while moving over inter- 
connected networks, the mobile computer management device 
having having a function for managing information on a 
current location of the mobile computer device and 
15 transf err ing\>ackets destined to the mobile computer device 
to the currentNlocation of the mobile computer device, the 
method comprising: the steps of: 

transmitting \ registration message containing the 
information on the current location of the mobile computer 
20 from the mobile computer at a visited site to a mobile 

computer management devrce at ^Kjiome network of the mobile 



computer ; 



yy carrying out a user aut-henticatlon to judge a 

properness of a user of the nubile computer according to a 



25 user- input-based information ; aii^ 

registering the current location of the mobile 
computer at the mobile computer management device when the 
user is judged as a proper user. \^ 




30 26. The method of claim 25, wherein thexuser 

authentication is carried out at the mob il\ computer 
management device according to a user-input-based 
information transmitted from the mobile computer to the 
mobile computer management device . 

35 
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27. The method of claim 25, wherein the user 
authentication is carried out locally at the mobile 
computer according to an information entered by the user at 
the mobile computer. 

5 \ 

28. An article of manufacture, comprising: 

a compVter usable medium having computer readable 
program code\means embodied therein for causing a computer 
to function asy a mobile computer management device located 

10 in a home network of a mobile computer for enabling the 
mobile computer \to carry out communications while moving 
over inter-connected networks, the computer readable 
program code means\ includes : 

first computer\readable program code means for causing 

15 said computer to register an information on a current 

location of the mobile, computer , based on a registration 
message transmitted from the inofeile/computer , which is 
currently located outside the^Mome network; 

second computer reachable program code means for 

20 causing said computer to transfer packets destined to the 
mobile computer to the current location of the mobile 
computer according to the information registered by the 
first computer readable program code means; and 

third computer readable pYogram code means for causing 

25 said computer to carry out a usW authentication, prior to 
a registration of the information on the current location 
of the mobile computer, to judge a properness of a user of 
the mobile computer according to a\user-input-based 
information received from the mobile computer, and 

30 controlling the registration of the information by the 

first computer readable program code means according to a 
result of the user authentication. \ 

29. An article of manufacture, comprising: 

35 a computer usable medium having computer readable 
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packets destined to the mobile computer to the current 
location of the mobile computer; and 
15 second computer readable program code means for 



11 ; 
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program code means embodied therein for causing a computer 
to function as a mobile computer capable of carrying out 
communications while moving over inter-connected networks, 
the computer readable program code means includes: 
5 first computer readable program code means for causing 

said computer to transmit a registration message containing 
an information on a current location of the mobile 
computer, from outside a home network of the mobile 
computer to a mobile computer management device located at 
10 the home network, the mobile computer management device 
having a function for managing the information on the 
current location of the mobile computer and transferring 



causing said computer to accept a user input for user 
j£2 authentication; and 

%\ third computer readable program code means for causing 

s said computer to transmit to the mobile computer management 

~2 20 device a response message containing information based on 

O the user input as a user authentication information, when a 

1; challenge message that requests returning of the user 

QJ authentication information is received from the mobile 

computer management device in response to the registration 
25 message. 

30. An article of manufacture, comprising: 

a computer usable medium having computer readable 
program code means embodied therein for causing a computer 
30 to function as a mobile computer device capable of carrying 
out communications while moving over inter-connected 
networks, the computer readable program code means 
includes: 

first computer readable program code means for causing 
35 said computer to read out desired information from an 
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external memory device connected to the mobile computer 
device, wherein the external memory device stores at least 
a user information and a network information to be used for 
communications at a visited site; 

second computer readable program code means for 
causing said computer to carry out first user 
authentication locally at the mobile computer device 
according to the user information stored in the external 
memory device and a user input; 

third computer readable program code means for causing 
said computer to transmit a registration message containing 
an information on a current location of the mobile computer 
device, from outside a home network of the mobile computer 
device to a mobile computer management device located at 
the home network, by using the network information read out 
from the external memory device under a control by the 
second computer readable program code means, the mobile 
computer management device having a function for managing 
the information on the current location of the mobile 
computer device and transferring packets destined to the 
mobile computer device to the current location of the 
mobile computer device; and 

fourth computer readable program code means for 
causing said computer to transmit to the mobile computer 
management device a user-input-based information to be used 
for second user authentication at the mobile computer 
management device . 
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